Code of Colorado Regulations
900 - Department of Law
904 - Attorney General-Consumer Protection Section
4 CCR 904-3 - Colorado Privacy Act Rules
Part 6 - DUTIES OF CONTROLLERS
Section 4 CCR 904-3-6.04 - CHANGES TO A PRIVACY NOTICE

Current through Register Vol. 47, No. 17, September 10, 2024

A. A Controller shall notify Consumers of material changes to a privacy notice. Such changes to a privacy notice shall be communicated to Consumers in a manner by which the Controller regularly interacts with Consumers.

1. Material changes may include, but are not limited to, changes to:
(1) categories of Personal Data Processed;

(2) Processing purposes;

(3) a Controller's identity;

(4) the act of sharing of Personal Data with Third Parties;

(5) categories of Third Parties Personal Data is shared with; or

(6) methods by which Consumers can exercise their Data Rights request.

B. If a material change rises to the level of a secondary use, a Controller must obtain Consent from a Consumer pursuant to 4 CCR 904-3, Rules 7.02 -7.05 in order to Process Personal Data that was collected before the change to the privacy notice for that Secondary Use.

Disclaimer: These regulations may not be the most recent version. Colorado may have more current or accurate information. We make no warranties or guarantees about the accuracy, completeness, or adequacy of the information contained on this site or the information linked to on the state site. Please check official sources.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.